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Clflln) ^mqndments 

1. (currently amended) A method comprising the steps of: 

generating a software agent at an origination host; 
splitting the software agent into a code unit and a data unit; 

forwarding from the originating host the data unit but not the code unit to [the] a destination 
hos t: and 

combining, by the destination host the data unit with a further code unit ass ociated with the 
data unit, forming a destination agent, wherein the further code unit is not sourced by the 
originating host . 

2. (original) The method of claim 1, further comprising the steps of authenticating the destination 
host, yielding authentication results, and integrating the authentication results into the software 
agent. 

3. (original) The method of claim 1, wherein the data unit is non-executable. 

4. (original) The method of claim 1 , further comprising the step of combining the data unit with a 
watermark prior to forwarding the data unit to the destination host. 

5. (original) The method of claim 1, further comprising the step of encrypting the data unit prior 
to forwarding the data unit to the destination host 

6. (original) A computer-readable signal bearing medium having computer readable program 
code that performs the steps of claim 1. 

7. (previously amended) A method comprising the steps of: 
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receiving a data unit at a destination host from an originating host; 
verifying the data unit; 

combining at the destination host the data unit with a code unit, forming a software agent, the 
code unit not being received from the originating host; 

executing the software agent. 

8. (original) The method of claim 7, further comprising the step of authenticating the originating 
host, yielding authentication results. 

9. (original) The method of claim 7, wherein the step of verifying comprises the step of checking 
that the authentication results match authentication results sent with the data unit. 

10. (original) The method of claim 7, further comprising the step of obtaining the code unit from 
an external source. 

1 1 . (original) The method of claim 10, further comprising the step of determining a level of risk 
acceptable for the code unit and selecting the external source based on the level of risk. 

12. (original) The method of claim 10, further comprising the step of authenticating the external 

» 

source prior to accepting the code unit. 

13. (original) The method of claim 7, further comprising the step of forwarding results of the 
executing step to the originating host. 

14. (original) The method of claim 7, further comprising the step of decrypting the data unit. 
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15. (original) The method of claim 7, further comprising the step of removing a watermark from 
the data unit. 

16. (original) The method of claim 7, further comprising the step of prohibiting a code unit of the 
originating host from being executed by the destination host. 

17 (original) The method of claim 7, further comprising the step of rejecting the data unit and 
inhibiting the combining and executing steps. 

18. (original) A computer-readable signal bearing medium having computer readable program 
code that performs the steps of claim 7. 

19. (original) A method comprising the steps of: 

splitting, by an originating host, a software agent into a code unit and a data unit; 
forwarding the data unit to a destination host; 

i 

receiving, by the destination host, the data unit from the originating host; 

combining, by the destination host, the data unit with a code unit associated with the data 
unit, forming a destination agent, wherein the code unit is not sourced by the originating host; 

executing the destination agent. 

20. (original) The method of claim 19, further comprising the step of integrating, by the 
originating host, authentication results into the software agent prior to the splitting step. 

21 . (original) The method of claim 19, wherein the data unit is non-executable. 
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22. (original) The method of claim 19, further comprising the step of verifying, by the 
destination host, the data unit 

23. (original) The method of claim 22, wherein the step of verifying comprises the step of 
checking that the authentication results match authentication results sent with the data unit. 

24. (original) The method of claim 19, further comprising the step of obtaining, by the 
destination host, the code unit associated with the data unit from an external source. 

25. (original) The method of claim 24, further comprising the step of determining a level of risk 
acceptable for the code unit and selecting the external source based on the level of risk. 

26. (original). The method of claim 24, further comprising die step of authenticating the external 
source prior to accepting the code unit associated with the data unit. 

27. (original) The method of claim 19, further comprising the steps of combining the data unit 
with a watermark prior to forwarding the data unit to the destination host and removing, by the 
destination host, the watermark from the data unit prior to the combining step. 

28. (original) The method of claim 19, further comprising the steps of encrypting the data unit 
prior to forwarding the data unit to the destination host and decrypting, by the destination host, 
the data unit prior to the combining step. 

29. (original) The method of claim 19, further comprising the step of prohibiting the code unit of 
the originating host from being executed by the destination host. 

30. (original) The method of claim 19, further comprising the step of forwarding results of the 
executing step to the originating host. 

3 1 . (original) The method of claim 19, further comprising the step of rejecting the data unit and 
inhibiting the combining and executing steps. 
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32. (original) A computer-readable signal bearing medium having computer readable program 
code that performs the steps of claim 19. 

33. (previously amended) A system comprising: 

an originating host, arranged and constructed to split a software agent into a code unit and a 
data unit arid forward the data unit but not the code unit associated with the data unit to a 
destination host; 

a destination host, arranged and constructed to receive the data unit, to combine the data unit 
with a code unit associated with the data unit, thereby forming a destination agent, wherein the 
code unit is not sourced by the originating host. 

34. (original) The system of claim 33, wherein the originating host and destination host are 
further arranged and constructed to complete an authentication process, yielding authentication 
results that are integrated into the software agent prior to the splitting step. 

35. (original) The system of claim 34, wherein the destination host is further arranged and 
constructed to verify the data unit by checking that the authentication results match 
authentication results sent with the data unit. 

36. (original) The system of claim 33, wherein the data unit is non-executable. 

37. (original) The system of claim 33, wherein the destination host is further arranged and 
constructed to obtain the code unit associated with the data unit from an external source. 

38. (original) The system of claim 37, wherein the destination host is further arranged and 
constructed to determine a level of risk acceptable for the code unit and select the external source 
based on the level of risk. 



? : ;;^f ACE 6/11 • RCVD AT 6/24/2005 4:06:29 PM [Eastern Daylight Tim ej* SVR:USPTO^FXRF-1/1 " DNIS:8729306 • CS{D:312 346 2810 • DURATION {mm^s):M^^^^^^^$^gff. 



Jun 24 2005 3:03PM Patti 8. Brill, LLC 312-346-2810 p. 7 

7 LIT-104/PRC-14S 

39. (original) The system of claim 33, wherein the originating host is further arranged and 
constructed to combine the data unit with a watermark prior to forwarding the data unit to the 
destination host, and wherein the destination host is further arranged and constructed to remove 
the watermark from the data unit prior to the combining step. 

40. (original) The system of claim 33, wherein the originating host is further arranged and 
constructed to encrypt the data unit prior to forwarding the data unit to the destination host, and 
wherein the destination host is further arranged and constructed to decrypt the data unit prior to 
the combining step. 

41. (original) The system of claim 33, wherein the destination host is further arranged and 
constructed to prohibit the code unit of the originating host from being executed by the 

' destination host. 
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